At EcoVadis, robust security and regulatory compliance are essential for protecting our assets and maintaining customer trust. We are seeking a results-oriented IT Security Compliance Lead to act as a core expert in ensuring organizational adherence to global IT compliance standards and regulatory mandates.This high-impact role requires an expert to lead, design, and continuously enhance our IT Compliance program, focusing on regulatory alignment, elevating the organization's security posture, and improving overall security maturity. You will drive continuous improvement across our IT security processes and ensure we meet evolving regulatory and customer needs.Key Responsibilities:<ul><li>Lead and Maintain the IT Compliance Program:<ul><li>Create, author, develop and implement a comprehensive GRC strategy, which includes policies, procedures, and security requirements that aligns with industry best practices and regulatory requirements.</li><li>Deploy, maintain and continuously develop a proprietary consolidated control framework that is consistent with the organization's compliance requirements and needs, including mapping controls to facilitate the easy adoption of regulatory changes and updates.</li><li>Conduct IT compliance gap assessments and work with control owners to identify, evaluate, and prioritize remediation actions in accordance with the organization’s risk acceptance criteria.</li><li>Collaborate with subject matter experts and management to develop and implement corrective action plans and control improvements to address identified compliance gaps and mitigate IT risks.</li><li>Collaborate with Product teams to ensure "Compliance-by-Design," providing requirements and highlighting security risks during the discovery phase of new features and improvements.</li><li>Maintain and suggest improvements to the security maturity of the organization, including creating and maintaining a security maturity assessment framework and managing the tracking of associated improvement actions.</li></ul></li><li>Ensure Regulatory and Industry Standards Compliance:<ul><li>Stay abreast of relevant laws, regulations, security frameworks and industry standards (e.g. GDPR, ISO 27001, NIS2, SOC 2,...), and work towards ensuring the organization's compliance with them.</li><li>Promote awareness of applicable laws and regulations towards employees and upper management.</li><li>Conduct regular audits and assessments to monitor compliance and identify areas of improvement.</li><li>Be an active participant in third party audits, including leading them to support IT Security needs, when applicable.</li></ul></li><li>Support Business Processes:<ul><li>Perform deep-dive analysis and author technical responses for security questionnaires, translating complex internal security controls into customized client-facing documentation.</li><li>Support in the review and provide expert analysis of security clauses in contracts, drafting customized security requirements for clients and suppliers.</li><li>Participate in clients meetings to address cybersecurity and regulatory compliance concerns and requirements.</li><li>Conduct and document security reviews of SaaS applications, producing original compliance assessment reports and designing mitigation recommendations.</li><li>Support in maintaining a Security Trust Center or similar customer-facing resources.</li></ul></li><li>Provide Strategic Guidance:<ul><li>Serve as a main point of contact for senior management and stakeholders on regulatory and IT compliance matters, creating strategic advisory materials detailing the impact of compliance initiatives on business decisions.</li><li>Develop and maintain strong relationships with key stakeholders across the organization.</li></ul></li><li>Deliver IT Compliance Reporting:<ul><li>Develop, support and maintain key performance indicators (KPI) for the IT Compliance function.</li><li>Gather, analyze and report on security metrics and compliance status.</li><li>Prepare and design customized presentations and reports to senior management on the status of the IT Compliance program and audit readiness status.</li></ul></li><li>Implement AI-Powered Compliance Operations:<ul><li>Lead the practical adoption of Generative AI tools (LLMs, AI Agents) to automate evidence collection, draft security policies, and summarize regulatory changes, significantly increasing team efficiency for IT Compliance deliverables.</li></ul></li></ul>Note: This job description is intended to provide a general overview of the position. It is not intended to be an exhaustive list of duties and responsibilities.

EcoVadis is the leading provider of business sustainability ratings.
Our solutions are backed by an international team of experts and powerful technology. We analyze data and build sustainability scorecards that give companies actionable insights into their environmental, social and ethical risks.

Senior IT Security Compliance Specialist

About the Job

About the Company

EcoVadis

Similar Jobs

Senior Officer, Security & Governance

Senior Officer, Security & Governance

NERC CIP Compliance Senior Technical Auditor

NERC CIP Compliance Senior Technical Auditor

IT Application Compliance Manager 80 - 100% (f/m/d)

IT Application Compliance Manager 80 - 100% (f/m/d)

Senior IT Security GRC Specialist

Senior IT Security GRC Specialist

Senior Application Security Specialist

Senior Application Security Specialist

Sr. Manager GRC

Sr. Manager GRC

Global IT Security Expert - OT

Global IT Security Expert - OT

Senior Information Manager

Senior Information Manager

Senior Cyber Security Analyst

Senior Cyber Security Analyst

Information Security Manager*

Information Security Manager*